Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
File:                     3a05921a-6543-395d-9659-96d79862bab5.roa (raw, json)
Hash identifier:          eD1VkEJQkONJUDeLb8OxIpKBInUYFHyOCyaubblZJtY=
Subject key identifier:   D3:9C:CE:41:EB:A7:7C:5F:AD:61:12:56:2E:C2:97:AD:49:1B:6B:5D
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F43285844D2E527231D104B108499C680
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
Signing time:             Thu 08 Feb 2024 14:00:33 +0000
ROA not before:           Thu 08 Feb 2024 14:00:33 +0000
ROA not after:            Wed 08 May 2024 13:00:33 +0000
asID:                     399871
IP address blocks:        2606:6040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d2:e5:27:23:1d:10:4b:10:84:99:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Feb  8 14:00:33 2024 GMT
            Not After : May  8 13:00:33 2024 GMT
        Subject: CN=ba921fa1-a073-4b18-ac0e-352c8c6a7d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:ba:45:5e:a6:d0:67:c6:e5:68:b5:7a:34:
                    12:eb:c7:3d:70:89:1e:6d:0e:a6:d6:e4:c2:81:4e:
                    27:03:76:ca:d9:f5:a5:fa:48:5e:9c:e4:88:55:24:
                    6d:f8:ee:9c:01:a4:5e:a9:45:94:56:54:19:1a:d6:
                    12:d6:67:57:d0:36:c4:c3:b7:37:49:a6:f6:d9:3c:
                    80:fc:18:81:92:2e:8c:98:7c:93:ea:12:80:9a:c8:
                    99:9b:51:59:b4:bf:28:f2:04:f7:0b:24:77:aa:7a:
                    69:99:7e:1b:eb:20:b3:84:f2:e2:b5:6d:98:5d:65:
                    ab:71:1f:ad:bb:18:e9:6d:71:cf:33:02:31:81:7d:
                    fa:4b:39:0d:41:39:b5:b0:c7:30:4f:7c:ad:f0:66:
                    93:c9:c8:32:f9:a7:b8:e7:05:62:a8:8d:d3:95:94:
                    7b:19:48:76:4b:d9:18:d2:24:65:f6:23:dd:aa:86:
                    df:82:4f:c0:cc:4c:29:00:3c:02:b4:e8:d2:54:9d:
                    8a:d1:31:c5:35:60:b1:65:e3:4f:38:05:48:30:81:
                    1a:38:37:2c:6a:4c:ea:6f:a6:a1:6b:41:36:b9:68:
                    a2:03:65:63:bf:41:ff:7a:4f:27:3c:3a:2d:99:0f:
                    38:03:1e:80:0f:70:cf:8c:98:fb:8c:5d:0e:34:89:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:CE:41:EB:A7:7C:5F:AD:61:12:56:2E:C2:97:AD:49:1B:6B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:4c:2b:ec:4c:a0:df:1c:ca:37:d4:93:df:81:f4:58:61:
         30:e5:07:7d:35:40:25:55:6f:0d:be:d6:2c:9c:e4:97:9c:ec:
         f2:b7:0c:c5:ef:2a:e9:44:df:f8:30:9b:8a:59:49:81:72:15:
         a7:98:f6:21:ba:ce:28:03:68:bd:06:31:da:8f:44:a5:a4:d1:
         57:70:ba:28:fc:4a:4f:c2:df:f5:27:ee:82:bb:23:65:1b:7e:
         18:75:29:03:74:a8:17:8c:74:2b:2e:ea:ac:2f:06:94:11:4d:
         fe:63:cf:ae:52:23:7b:cc:0b:bd:cd:c9:da:fd:bf:42:11:2e:
         b3:6b:83:e5:47:e1:a1:4d:7c:1c:32:72:f8:ff:6c:be:12:3f:
         09:4b:58:30:c8:23:37:85:c2:54:25:49:45:f3:1a:80:e2:65:
         da:9b:bc:58:77:50:2b:60:e6:f0:84:92:42:f3:ab:15:52:64:
         7a:b6:7e:3e:16:98:f1:b5:c3:0f:b9:43:74:46:81:cb:e9:a1:
         e5:37:14:76:f9:06:6d:8b:ca:98:92:ce:1e:dd:4f:69:91:e4:
         e1:a7:bc:ae:df:f8:23:d6:94:e1:c4:4b:eb:da:be:5b:d4:c9:
         c8:33:3b:95:08:f4:8d:47:75:6f:c7:37:12:c5:e1:98:df:31:
         9d:d0:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:08:00 2024 by rpki-client on console-ams.rpki-client.org